Skip to content

Known vulnerabilities in Samsung Mobile Devices

Is your version affected?

CVE Summary Score Published
CVE-2023-21461 Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows… 4.0 Medium Mar 16, 2023
CVE-2023-21440 Improper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1 allows attackers to take a… 6.2 Medium Feb 9, 2023
CVE-2023-21439 Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to… 8.5 High Feb 9, 2023
CVE-2023-21420 Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release 1 allows arbitrary… 7.3 High Feb 9, 2023
CVE-2023-21438 Improper logic in HomeScreen prior to SMR Feb-2023 Release 1 allows physical attacker to access App preview protected by… 2.1 Low Feb 9, 2023
CVE-2023-21430 An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior… 4.4 Medium Feb 9, 2023
CVE-2023-21419 An improper implementation logic in Secure Folder prior to SMR Jan-2023 Release 1 allows the Secure Folder container… 4.3 Medium Feb 9, 2023
CVE-2023-21429 Improper usage of implict intent in ePDG prior to SMR JAN-2023 Release 1 allows attacker to access SSID 4.0 Medium Feb 9, 2023
CVE-2023-21437 Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to… 4.0 Medium Feb 9, 2023
CVE-2023-21428 Improper input validation vulnerability in TelephonyUI prior to SMR Jan-2023 Release 1 allows attackers to configure… 4.0 Medium Feb 9, 2023
CVE-2023-21436 Improper usage of implicit intent in Contacts prior to SMR Feb-2023 Release 1 allows attacker to get account ID 3.3 Low Feb 9, 2023
CVE-2023-21427 Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without… 5.4 Medium Feb 9, 2023
CVE-2023-21435 Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to… 4.4 Medium Feb 9, 2023
CVE-2023-21451 A Stack-based overflow vulnerability in IpcRxEmbmsSessionList in SECRIL prior to Android S(12) allows attacker to… 6.7 Medium Feb 9, 2023
CVE-2023-21426 Hardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows attackers to access… 4.3 Medium Feb 9, 2023
CVE-2023-21425 Improper access control vulnerability in telecom application prior to SMR JAN-2023 Release 1 allows local attackers to… 4.3 Medium Feb 9, 2023
CVE-2023-21424 Improper Handling of Insufficient Permissions or Privileges vulnerability in SemChameleonHelper prior to SMR Jan-2023… 5.1 Medium Feb 9, 2023
CVE-2023-21423 Improper authorization vulnerability in ChnFileShareKit prior to SMR Jan-2023 Release 1 allows attacker to control BLE… 5.1 Medium Feb 9, 2023
CVE-2023-21422 Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows… 5.7 Medium Feb 9, 2023
CVE-2023-21421 Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR… 5.9 Medium Feb 9, 2023
CVE-2022-39899 Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to… 5.7 Medium Dec 8, 2022
CVE-2022-39898 Improper access control vulnerability in IIccPhoneBook prior to SMR Dec-2022 Release 1 allows attackers to access some… 4.0 Medium Dec 8, 2022
CVE-2022-39908 TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local… 6.9 Medium Dec 8, 2022
CVE-2022-39914 Exposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung DisplayManagerService prior to… 4.0 Medium Dec 8, 2022
CVE-2022-39907 Integer overflow vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows… 6.9 Medium Dec 8, 2022

Other Samsung Mobile products